SQL Server 2014 improves the segregation of duties by implementing new server permissions. The most important is the SELECT ALL USERS SECURABLES permission that will help to restrict database administrators from viewing data in all databases. My article is a complement to David Barbarin’s article ‘SQL Server 2014: SELECT ALL USERS SECURABLES & DB admins’. I have tested some cases…
Microsoft will introduce four new security permissions in SQL Server 2014. One of them called SELECT ALL USERS SECURABLES is the subject of this post. As explained by Microsoft SQL Server 2014 will allow a database administrator to manage data without seeing sensitive data or personally identifiable information. We can achieve a greater compliance but we must take care what…
During one of my last consulting missions, I had to install Oracle Database Vault on an existing Oracle environment. It clearly was not a straigthforward process, since I experienced some weird errors such as: ORA-28003: password verification for the specified password failed, ORA-20001: Password length less than 8, and ORA-01917: user or role ‘LBACSYS’ does not exist. After having a…
Database Vault solution allows to create rules that manage access to database. Among these rules there is what is called in Database Vault “Rule Sets”. These logic components are written as PL/SQL functions to return Boolean results.
If rule expressions do not match the user context, the access is refused and a specific message can be configured in order to
…
Le marché du Database Activity Monitoring (DAM) devenant de plus en plus important avec des produits tels que Imperva, Guardium ou Sentrigo, je me suis intéressé au produit Oracle Database Firewall, qu’Oracle présente comme un substitut aux différents acteurs du marché des DAMs.
Are you experiencing network access issues after a migration to Oracle Database 11g Release 2 (11.2)? If yes, you probably have to allow the concerned PL/SQL packages to access your network again. This posting will show you how.
Quelles sont les faiblesses de l’encryption des mots de passe Oracle ? Comment est-ce qu’Oracle crée les clés de hachage afin d’en améliorer la sécurité ? C’est ce que je vous propose de découvrir dans ce post. Le mot de passe est la forme la plus commune d’authentification. Ce dernier est stocké dans une table Oracle sous la forme d’une…
